Air Gapped SCADA & ICS Networks Now Threatened From Ransomware


By Will Hatcher

In my role as IT Audit Security Manager, I drafted this brief review of a new cybersecurity threat involving the use of SCADA & ICS systems. 

This new threat involves the first of its kind Ransomware targeting a common Rockwell Automation Allen Bradley industrial control system posing as an update.  The attackers are hoping plant administrators will download their infected file to USB and update plant systems.  Allen Bradley systems are found in US oil, gas, waste water and electrical generation systems.

I invite you to download this brief document highlighting what we know about risks associated with this SCADA/ICS threat and some recommended mitigation measures.

As always, contact me, or any member of the IT Security Team at Schneider Downs, if you’d like more information on this issue, or simply would like to learn more about managing risks associated with IT security.  Reach me at whatcher@schneiderdowns.com, or 412-697-5877.

You’ve heard our thoughts… We’d like to hear yours

The Schneider Downs Our Thoughts On blog exists to create a dialogue on issues that are important to organizations and individuals. While we enjoy sharing our ideas and insights, we’re especially interested in what you may have to say. If you have a question or a comment about this article – or any article from the Our Thoughts On blog – we hope you’ll share it with us. After all, a dialogue is an exchange of ideas, and we’d like to hear from you. Email us at contactSD@schneiderdowns.com.

Material discussed is meant for informational purposes only, and it is not to be construed as investment, tax, or legal advice. Please note that individual situations can vary. Therefore, this information should be relied upon when coordinated with individual professional advice.

© 2019 Schneider Downs. All rights-reserved. All content on this site is property of Schneider Downs unless otherwise noted and should not be used without written permission.